$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa File: 65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa (raw, json) Hash identifier: b2ZPpAQcn0QuMZjenUyzZgp7kffZFSRiJabz2TRWRb4= Subject key identifier: 89:C7:C3:05:F6:D0:4D:9F:D4:F0:8D:9F:32:2B:3E:61:52:F2:EE:82 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7662355326850624BC00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:76:62:35:53:26:85:06:24:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=4717f79b-9888-4ec2-ad59-abb032847c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fe:dc:a4:e3:c8:1c:36:e0:0d:c0:2f:68:19: 4b:a5:aa:63:55:5b:38:e5:ca:19:b2:4b:6b:ac:52: a8:5c:85:3b:99:99:0a:f9:07:0c:27:97:fd:4f:58: 15:b2:1a:a2:f6:94:b1:a4:96:3c:45:cb:e3:72:75: 2c:05:a2:a8:07:c7:22:fd:4e:06:83:ff:9b:48:09: 58:7e:91:d7:d8:51:20:56:3c:ad:55:fb:66:da:11: b7:03:bf:80:22:ad:c4:23:38:04:ed:4f:8f:2b:d0: a7:5a:b4:88:ab:58:3b:e1:42:fe:8c:1a:44:14:ed: 40:9c:d2:d5:50:f0:9c:6f:31:ad:af:c1:2b:5a:7e: be:40:35:88:44:51:7d:76:85:44:af:70:ae:91:d9: 08:79:52:49:6e:b7:02:82:14:6a:c0:f9:fd:0c:ca: e1:7a:2c:89:90:19:42:a6:2c:b2:11:a8:3b:aa:33: 7f:4c:30:5b:08:6e:8b:e1:da:7c:c4:9e:7e:04:92: fd:13:16:6d:e6:ae:5a:e5:bf:fe:32:d2:6a:d0:e3: 21:4c:ac:70:e1:ef:2f:ef:76:1a:95:a1:52:50:f1: d3:9e:f4:8b:75:57:17:8f:e8:00:5b:22:74:ce:e0: 83:97:ff:5d:8f:b0:13:c0:55:77:c7:ba:0a:a2:54: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C7:C3:05:F6:D0:4D:9F:D4:F0:8D:9F:32:2B:3E:61:52:F2:EE:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:64:97:a4:91:14:e0:ea:78:d5:4a:d4:05:1a:8e:61:95:10: 01:07:11:03:98:3c:7c:a4:90:6f:20:a0:b8:bd:4a:eb:9b:8c: e6:00:2d:45:50:3a:df:04:a3:29:50:2e:63:b6:b4:7e:0b:94: a0:e7:80:10:5f:ec:7f:87:5d:51:a8:b4:ab:1d:d4:1e:9c:30: 4d:b9:c5:3a:87:57:7a:b8:a8:9a:d8:56:62:10:2f:17:82:e7: 44:97:da:10:48:1a:23:24:3f:10:71:6f:5e:df:14:2d:da:1b: b2:6c:47:76:6c:5f:68:00:1c:a8:5b:6d:b9:12:0c:11:4b:95: 6f:e1:80:be:63:47:a6:78:4c:23:0b:19:70:f4:5b:26:be:0c: 93:29:6f:fc:4c:6d:6c:4b:5f:81:9c:76:09:32:e5:36:ef:4a: e1:fc:09:c0:e7:74:fc:52:ca:77:75:18:25:cb:cd:77:17:df: 0e:b6:f2:70:38:93:96:a6:4d:4a:29:16:a1:99:8f:aa:fd:10: d4:c7:dd:f9:83:7a:83:b2:51:ed:30:da:9a:25:e8:8d:de:6e: 0a:e7:9b:3f:44:1a:72:1a:bc:8c:92:d3:2a:fb:4d:d4:2e:b3: 2e:2a:71:25:25:bb:f3:5a:46:c5:f4:4f:e7:22:af:73:e2:af: 0a:ad:d7:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHZiNVMmhQYkvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NDcxN2Y3OWItOTg4OC00ZWMyLWFkNTktYWJiMDMyODQ3YzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/7cpOPIHDbgDcAvaBlLpapjVVs45coZsktr rFKoXIU7mZkK+QcMJ5f9T1gVshqi9pSxpJY8RcvjcnUsBaKoB8ci/U4Gg/+bSAlY fpHX2FEgVjytVftm2hG3A7+AIq3EIzgE7U+PK9CnWrSIq1g74UL+jBpEFO1AnNLV UPCcbzGtr8ErWn6+QDWIRFF9doVEr3CukdkIeVJJbrcCghRqwPn9DMrheiyJkBlC piyyEag7qjN/TDBbCG6L4dp8xJ5+BJL9ExZt5q5a5b/+MtJq0OMhTKxw4e8v73Ya laFSUPHTnvSLdVcXj+gAWyJ0zuCDl/9dj7ATwFV3x7oKolTgxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInHwwX20E2f1PCNnzIrPmFS8u6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjViM2E0OWEtYjRhNS0z NzIxLTk4ODktZGRjMTQ4OGI0YjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5kl6SRFODqeNVK1AUajmGVEAEHEQOYPHykkG8goLi9SuubjOYALUVQ Ot8EoylQLmO2tH4LlKDngBBf7H+HXVGotKsd1B6cME25xTqHV3q4qJrYVmIQLxeC 50SX2hBIGiMkPxBxb17fFC3aG7JsR3ZsX2gAHKhbbbkSDBFLlW/hgL5jR6Z4TCML GXD0Wya+DJMpb/xMbWxLX4Gcdgky5TbvSuH8CcDndPxSynd1GCXLzXcX3w628nA4 k5amTUopFqGZj6r9ENTH3fmDeoOyUe0w2pol6I3ebgrnmz9EGnIavIyS0yr7TdQu sy4qcSUlu/NaRsX0T+cir3Pirwqt1/U= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:03 2025 by rpki-client